Corporate Controller & Data Analytics

Privacy Policy

In this page you can find information on the processing activities connected to the platform nCore (hereinafter the “Platform”) used for managing the applications to job positions within the company, in relation to the personal data of both candidates applying for a position and employees of the companies, who access and use the Platform. This information is provided to you pursuant to art. 13 and art. 14 of the European Regulation No. 679/2016 (hereinafter the “Regulation”) by the company where you are applying.

DATA CONTROLLER AND DATA PROCESSORS

The Data Controller is the company of the Zambon Group where you are applying for a job position (hereinafter the “Company” or the “Controller”).

For the purposes described below, the Controller avails itself with the services of external providers, duly appointed either as Data Processors or as Sub-Data Processors, depending on the circumstances, pursuant to art. 28 of the Regulation: more specifically, the Platform is licensed to the Company by nCore S.r.l., with registered offices in Vittor Pisani, 15 - 20124 Milan (MI) – Italy (hereinafter the "Data Processor").

SOURCE OF THE DATA

For the purposes described in the following paragraphs, the Controller will process the personal data you provided while filling the online questionnaire, available on the Platform, including information on your professional experience or eventual conflict of interest with the job position you are applying for (crucial for the selection), as well as other aggregated information which will be collected on the internet through an ad hoc search engine operated by our Data Processor (with the sole purpose of integrating some of the information you provided relating to, for example, the dimension and the turnover of the companies you previously worked for or the location of your place of residence respect to the offices of the Controller).

CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASIS OF THE PROCESSING

Your personal data will be processed for the purpose of evaluating your application for a job position, if you are an external candidate, or for the purpose of evaluating your career progression, if you already are an employee of the Company. The first step of the evaluation process will be the generation of a numeric score, which will be considered, together with individual presentation videos recorded by you remotely, and sent to the Company so that we can better get to know you, with the results of interviews with our recruiters and with any other additional step requested by the relevant competent department of the Company. The numeric score will be generated on the basis of the answers you will give to a number of questions, designed to assess the compatibility of your profile, your educational background and your experiences, with the requirements of the relevant job position.

The legal basis of this processing for the purpose of the selection, and in particular with regard to the first step (automated elaboration of the data provided, and generation of a score) is your consent, provided before accessing the questionnaire. Providing your consent is not mandatory. Nevertheless, and if you do not wish to provide your consent, your application will not be evaluated through the Platform and, if sent through other channels, it may not be taken into consideration, or it could be examined in different times and modalities than the other applications.

Please note that, in relation to this activity, there will be no decisions taken solely on the basis of automated processing, and therefore no decision regarding the acceptance or the rejection of your application shall be taken on the sole basis of the numeric score obtained: your application will always be evaluated by the relevant competent departments of the Company, together with the results of the interviews and of any other steps required in the hiring process. Consent can be withdrawn at any time, in the modalities better detailed below: withdrawal has only effect for the future, and previous processing activities shall remain legitimate.

Furthermore, in certain circumstances, and for the purposes of the evaluation of your application, we may ask you to provide additional information, necessary in order to establish the employment relationship, including special categories of personal data, pursuant to art. 9 of the Regulation, such as:

• Data relating to your health, limited to whether you belong to protected categories pursuant to the applicable laws; and
• Judicial data limited to specific positions and roles where we deem it necessary to acquire such information.

Processing of such data is based on a legal obligation (pursuant the applicable employment and labor laws) or the Controller’s legitimate interest.

Lastly, the legal basis of the processing of the aggregated information collected through our Data Processor, for the purpose of integrating the information you provided (see previous par. “Source of the data), is the Controller’s legitimate interest to better understand the information you provided.

RETENTION PERIODS

The personal data you provided within the context of your interactions with the Platform and further elaborations thereof will be stored for a period of 12 months from the filling of the questionnaire or from last interaction with the platform.

COMMUNICATIONS AND TRANSFERS OF PERSONAL DATA

Your personal data will not be disclosed and will be processed by the Company’s instructed personnel. Nevertheless, your personal data may also be processed by other companies of the Zambon Group,  or by Zambon S.p.A., which manages the Platform at a central level, and solely for purposes relating to job opportunities within the group or for the correct technical functioning of the Platform.

Your personal data will be stored on servers located within the European Union.

YOUR RIGHTS

You may, at any time and free of charge, request to the Data Controller to exercise the rights provided by art. 15 et seq. of the Regulation, including the right to access your personal data, the right to request the update, the modification, the integration, the portability or the erasure of your personal data. Furthermore, you have the right to revoke the consents previously provided, with effect for the future and without prejudice to the processing activities already carried out, and the right to object to the processing: refusal to fill in the questionnaire shall not compromise your application nor your evaluation in relation to the job position.

If you wish to exercise one of the rights listed above, you may write to the Company where you applied, to the address of its registered offices, or you may send an e-mail to its Data Protection Officer (DPO), where appointed.

If you believe that one of your rights has been violated, you may bring your claim to the competent supervisory authority pursuant to art. 77 of the Regulation or directly to the judicial authority.

I hereby declare that I have received, read and understood the information provided to me by the Company where I am applying and therefore I

CONSENT          

to the processing of my personal data for the purpose of the selection and development of employees including – among others - the generation a numeric score, which will be evaluated, together with the results of any previously recorded video-interviews, with the interviews with the Company’s recruiters and with any other additional step requested by the relevant competent department of the Company, for evaluating my application to a job position.

Types of Data collected

Among the Personal Information collected by this Site through the contact form and the form for spontaneous applications there are: Cookies, Usage Data, Email, Password, Name, Surname.

Other Personal Data collected may be indicated in other sections of this privacy policy or through informative texts displayed together with the collection of the Data.

Personal Data is entered voluntarily by the User.

Any use of Cookies - or other tracking tools - by this Site, unless otherwise specified, has the purpose of identifying the User and recording the related preferences for purposes strictly related to the provision of the service requested by the User.

Failure to provide the User with some Personal Data may prevent this Site from providing its services.

The User assumes the responsibility of the Personal Data of third parties published or shared through this Site and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

Purposes of the processing of collected data

The Data concerning the User is collected to allow the Owner to provide its services, as well as for the following purposes: Analytics, Contacting the User, Optimizing and distributing traffic.

The types of Personal Data used for each purpose are indicated above.

Communication and dissemination of data

The data collected using cookies may be processed by employees and collaborators of nCore HR, as persons in charge and responsible for data processing.

The list of data is constantly updated and is available upon request by sending a communication to the address below or an e-mail to ----

The data collected using cookies will not be disclosed.

Your rights

At any time you can request information on the processing of your personal data, obtain the update, correction or integration of the same, as well as obtaining the cancellation, transformation into anonymous form or blocking of data processed in violation of the law and oppose the processing of You according to the provisions of art. 7 of Legislative Decree no. 196/2003 reported in full at the end of this policy.

To exercise your rights you can contact the Data Controller by sending a written notice to the address below or an e-mail to ----

Owner and manager of the treatment

Holder of the treatment is ----

Internal manager of the treatment is ----

Last updated: July 2015

Art. 7 D.Lgs 196/2003. Rights attributed to the interested party.

The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in intelligible form.
The interested party has the right to obtain the indication:
the origin of personal data;
of the purposes and methods of processing;
of the logic applied in case of treatment carried out with the aid of electronic instruments;
of the identifying details of the holder, of the responsible and of the designated representative according to article 5, paragraph 2;
the subjects or the categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents.
The interested party has the right to obtain:
updating, rectification or, when interested, integration of data;
the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible o involves a use of means manifestly disproportionate to the protected right.
The interested party has the right to object, in whole or in part:
for legitimate reasons, the processing of personal data concerning him, even if pertinent to the purpose of the collection;
to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
Changes to this information

The Data Controller reserves the right to make changes to this privacy statement at any time by giving notice to Users on this page. Please therefore consult this page often, referring to the date of the last modification indicated at the bottom. In case of non-acceptance of the changes made to this statement, the User is required to cease using this Site and may request the Data Controller to remove his Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected until then.

Information on this privacy policy

The Data Controller is responsible for the privacy policy.

Last updated: July 2015